CVE Catalog

CVE-2026-110540

HighCVSS 7.1
Published: Translated: NVD NIST

Summary

Dell PowerProtect Data Domain Management Center contains a Missing Authorization vulnerability. A low privileged attacker with remote access could exploit it to perform unauthorized operations.

Risk Assessment

The flaw may allow a low-privileged user to perform operations they should not be permitted to execute, undermining access control in the backup environment.

Recommendation

Update Dell PowerProtect Data Domain Management Center to a fixed version and review remote account permissions.

Other vulnerabilities in Dell PowerProtect Data Domain Management Center

See all
Original NVD description (English source)

Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized operation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS